70a6d737ae
Auto-merge PR #657 (trusted generated PR)
...
Co-authored-by: chack-agent <chack-agent@users.noreply.github.com >
2026-06-30 14:43:16 +02:00
Carlos Polop
93c9b909e6
ci: auto-merge trusted generated PRs
2026-06-30 14:42:50 +02:00
Carlos Polop
24816a4996
Rename package vulnerability subsection
2026-06-29 15:41:21 +02:00
Carlos Polop
28f0a7f2e2
Fix linPEAS hostname variable metadata
2026-06-29 14:46:00 +02:00
Carlos Polop
4618657125
Add winPEAS online package vulnerability lookup
2026-06-29 14:34:27 +02:00
Carlos Polop
2de2b019ec
fix
2026-06-29 14:22:53 +02:00
Carlos Polop
aef2b84f33
Add opt-in online package vulnerability lookup
2026-06-29 13:50:25 +02:00
4c0c55fa99
fix: resolve CVE-2026-41651 pack2theroot false positive ( #653 )
...
* fix: resolve CVE-2026-41651 pack2theroot false positive
* chore: add contributor entry
* fix: use offline PackageKit fixed-version checks
---------
Co-authored-by: Carlos Polop <carlospolop@gmail.com >
2026-06-29 13:07:31 +02:00
SirBroccoli and GitHub
14e006576e
Merge pull request #655 from kkreiju/fix/dirty-frag-false-positive
...
fix: resolve CVE-2026-43284 and CVE-2026-43500 dirty frag false positive
2026-06-29 12:52:48 +02:00
SirBroccoli and GitHub
17bcb54677
Merge pull request #656 from kkreiju/fix/cve-2025-38236-registry
...
fix: resolve CVE-2025-38236 kernel version constraints
2026-06-29 12:52:21 +02:00
Carlos Polop
50e07e6474
fix: gate Dirty Frag checks by fixed kernel ranges
2026-06-29 12:51:19 +02:00
Carlos Polop
ca84505efc
fix: refine CVE-2025-38236 kernel ranges
2026-06-29 12:46:51 +02:00
kkreiju
341458ecf0
fix: resolve CVE-2025-38236 kernel version constraints
2026-06-29 17:23:55 +08:00
kkreiju
2882ef940d
fix: resolve CVE-2026-43284 and CVE-2026-43500 dirty frag false positive
2026-06-29 17:04:27 +08:00
f53590f282
chore(winpeas): update windows version vulnerability definitions
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-06-29 06:28:57 +00:00
32c351ab68
chore(winpeas): update windows version vulnerability definitions
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-06-28 19:05:54 +00:00
Carlos Polop and Claude Opus 4.8
f4c29dbb03
ci: build, wait and merge windows definition PRs inline (no workflow_run/PAT-dispatch)
...
CODEX_FIXER_TOKEN is a fine-grained PAT with Contents/Pull-requests write but NOT
Actions:write, so it cannot create a workflow_dispatch event; and a github.token
-dispatched run never emits a workflow_run event to drive the triage merge job. So
neither half of the old cross-workflow design could work.
Instead, update_windows_version_definitions.yml now dispatches PR-tests with
github.token (this workflow already has actions:write), polls that run directly,
and on success squash-merges the PR with the CODEX_FIXER_TOKEN PAT so the push to
master triggers CI-master_test -> Publish_release. Remove the now-dead
auto_merge_windows_definition_bot_pr job from chack-agent-pr-triage.yml and the
temporary token probe. Bump the job timeout to 90m to cover the inline wait.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-28 20:33:50 +02:00
Carlos Polop and Claude Opus 4.8
e193030157
ci: probe CODEX_FIXER_TOKEN contents/PR write (temporary)
...
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-28 20:31:00 +02:00
Carlos Polop and Claude Opus 4.8
5ca6d6b797
ci: use CODEX_FIXER_TOKEN for bot PR auto-merge (secret CHACK_AGENT_FIXER_TOKEN never existed)
...
The workflows referenced a secret (CHACK_AGENT_FIXER_TOKEN) that does not exist
in the repo, so it resolved to empty and the windows-definitions auto-merge could
neither dispatch PR-tests nor merge. Point every reference at the existing
CODEX_FIXER_TOKEN PAT (fine-grained, admin on the repo) instead. Remove the
temporary token probe.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-28 20:24:19 +02:00
Carlos Polop and Claude Opus 4.8
dd11345f50
ci: temporary token probe (to be removed)
...
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-28 20:21:46 +02:00
Carlos Polop and Claude Opus 4.8
0a1b242fcf
ci: actually auto-merge windows definition bot PRs
...
Dispatch PR-tests with a PAT instead of github.token: a workflow run owned
by GITHUB_TOKEN does not emit a downstream `workflow_run` event, so the
chack-agent-pr-triage auto-merge job never fired for the bot PR. Also accept
the UNSTABLE merge state (the bot PR's `action_required` pull_request run
keeps it permanently UNSTABLE) and drop the explicit CI-master_test dispatch
since the PAT squash-merge's push to master already triggers the release,
avoiding a double release.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-28 20:08:59 +02:00
SirBroccoli and GitHub
f220f1bf81
Merge pull request #649 from JChamblee99/master
...
kernel registry: add CVE-2026-46333 ptrace exit-race (ssh-keysign-pwn)
2026-06-28 19:59:00 +02:00
Carlos Polop
615a285482
Merge master into PR 649
2026-06-28 19:56:23 +02:00
Carlos Polop
a7a09a338e
CVE-2025-9074
2026-06-24 13:30:12 +02:00
b20a0db319
Auto-merge PR #651 (Chack Agent)
...
Co-authored-by: HackTricks PEASS Wordlist Updater <peass-wordlist-updater@hacktricks.xyz >
2026-06-22 10:00:16 +00:00
JChamblee99
e0faca1926
Added checks for CVE-2026-46333
2026-06-11 12:40:07 -05:00
a9d8395583
Auto-merge PR #648 (Chack Agent)
...
Co-authored-by: HackTricks PEASS Wordlist Updater <peass-wordlist-updater@hacktricks.xyz >
2026-06-08 08:58:55 +00:00
Carlos Polop
e7ac3b2d0e
ci: allow master release publishing
2026-06-05 00:51:35 +02:00
Carlos Polop
3a7f622b47
ci: release after trusted windows definitions merge
2026-06-05 00:40:25 +02:00
Carlos Polop
9c109c2d35
ci: require release-triggering token for windows auto-merge
2026-06-05 00:38:42 +02:00
Carlos Polop
c7f41f985c
ci: trigger release workflow after windows definitions auto-merge
2026-06-05 00:16:31 +02:00
e23cc3b749
chore(winpeas): update windows version vulnerability definitions
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-06-04 21:43:01 +00:00
Carlos Polop
ade17cfd05
ci: auto-merge windows definition PRs reliably
2026-06-04 23:39:19 +02:00
4be3e81aef
Auto-merge PR #647 (Chack Agent)
...
Co-authored-by: HackTricks PEASS Autoimprover <peass-autoimprover@hacktricks.xyz >
2026-05-31 06:56:24 +00:00
01d9795902
Auto-merge PR #646 (Chack Agent)
...
Co-authored-by: HackTricks PEASS Autoimprover <peass-autoimprover@hacktricks.xyz >
2026-05-31 06:50:53 +00:00
Carlos Polop
d01e61a0ac
Merge branch 'master' of github.com:peass-ng/PEASS-ng
2026-05-28 12:44:29 +02:00
Carlos Polop
195fc242ba
f
2026-05-28 12:44:26 +02:00
e5f01f3df7
Auto-merge PR #643 (Chack Agent)
...
Co-authored-by: HackTricks PEASS Wordlist Updater <peass-wordlist-updater@hacktricks.xyz >
2026-05-25 08:07:28 +00:00
eb31e0dda4
chore(winpeas): update windows version vulnerability definitions ( #641 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-05-21 13:29:29 +02:00
Carlos Polop
18ea88b35b
Expand linPEAS module metadata tests
2026-05-21 13:24:52 +02:00
Carlos Polop
ca743bf978
Bound linpeas sudo listing checks
2026-05-21 13:09:33 +02:00
Carlos Polop
1ea8107bf5
Fix bot PR auto-merge and linpeas exclude matching
2026-05-21 13:03:38 +02:00
e5866ca0a1
chore(winpeas): update windows version vulnerability definitions ( #638 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-05-10 19:02:06 +02:00
sammonsempes and GitHub
0d6dab6c1e
[LINPEAS] Add Dirty Frag check (CVE-2026-43284 / CVE-2026-43500) ( #640 )
2026-05-10 19:01:55 +02:00
179f79794d
Fix broken link for PackageKit Pack2TheRoot ( #639 )
...
Co-authored-by: Rodrigo <rodrigo@192>
2026-05-06 10:50:12 +02:00
Carlos Polop
15a244cb30
Improve Azure VM managed identity discovery
2026-05-05 17:58:20 +02:00
Carlos Polop
49bafa87a9
f
2026-04-30 13:45:33 +02:00
Carlos Polop
8bf6564d02
f
2026-04-30 13:30:04 +02:00
Carlos Polop
c447ef1433
copyfail check
2026-04-30 12:59:09 +02:00
Carlos Polop
2d0eb60e5c
ci: merge validated windows definition PRs
2026-04-30 12:00:32 +02:00
